General

  • Target

    5768eba6718c932e9caa87170c71edebe36888bc125a811ed59b7ec829f624f9

  • Size

    7.9MB

  • MD5

    a46d082492eba45dff4253457a9de5ed

  • SHA1

    45e9a8b5028fb7ccd1de374489456c6a2f984b21

  • SHA256

    5768eba6718c932e9caa87170c71edebe36888bc125a811ed59b7ec829f624f9

  • SHA512

    53cfe35b0968464eeae36c081bcf71aecd96caae809f7ffe27346aa97120186e0dd234a9bf0ed752ba1e2de907a285f1dd5a1f26f6d47d3e2297f66583c6c048

  • SSDEEP

    196608:bW+hUvL/bLtFSDr3Asak/2RUADnoXZd64KxgBZb:bWcqHtFGrwUU1nxgBZ

Score
10/10

Malware Config

Signatures

  • Detect ZGRat V1 1 IoCs
  • Zgrat family
  • .NET Reactor proctector 1 IoCs

    Detects an executable protected by an unregistered version of Eziriz's .NET Reactor.

  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 5768eba6718c932e9caa87170c71edebe36888bc125a811ed59b7ec829f624f9
    .exe windows:4 windows x86

    f34d5f2d4577ed6d9ceec516c1f5a744


    Headers

    Imports

    Sections